Thanks for all your replies..Ed..Jennifer...
Ok, if some one can throw some light on what is wrong with this picture, I
will really appreciate that. Here is how the permissions are assigned on
each of these components:
****************************************************************************
****************
Exchange Server 2000 Enterprise, Sp3
C:--O/S---------Everyone (Full Control)?
D:---Exchange---- Everyone (Full Control)?
E:--------mdb Database----Everyone (Full Control)?
ADUC: "Everyone" has full access in any users "Mailbox Rights"
"Authenticated users" has full access in any users "Mailbox Rights"
"Domain Users" has full access in any users "Mailbox Rights"
(Where is this getting inherited from? I cannot remove these
permissions at this level)
ESM(Server level): "Authenticated users"--READ,WRITE,EXECUTE,READ
PERMISSIONS,LIST CONTENTS,READ PROPERTIES, WRITE
PROPERTIES.
"Domain Users"--All permissions except Full
"Everyone"--READ,WRITE,EXECUTE,READ PERMISSIONS,LIST
CONTENTS,READ PROPERTIES, WRITE PROPERTIEs
ESM(Mailbox Store level): "Everyone Group"--Read,Execute, Read
permissions, List contents, Read Properties, write properties,list
object,Recieve as, send as.
"Domain Users"--All permissions except Full
"Authenticated users"--- same as everyone group.
****************************************************************************
*************
TIA
Raj
-----Original Message-----
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 23, 2002 8:34 PM
To: Exchange Discussions
Subject: RE: Users have unlimited permissions(was: Never seen this....)
What you're seeing could only have happened by someone futzing with the
permissions.
Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Pillai, Raj
Sent: Friday, August 23, 2002 2:16 PM
To: Exchange Discussions
Subject: Users have unlimited permissions(was: Never seen this....)
I think I have a similar issue here, except it is Exchange 2000 sp3 . I
can see that a delegateA with minimum permission has unlimited access to
userA's mailbox. In AD users and computers,when I look at the mailbox
rights of userA the "everyone" group has full access, I don't know how
this happened, it states that it is inherited from the parent container.
UserA is sitting inside this
hierarchy:
AD Users and Computers----
------Dancona.com
----All Dancona users
----Attorneys
In the parent containers Everyone does not have full control rights.
However in ESM if I look at properties of Mailbox store in the security
tab the everyone group has all kinds of rights except Full control. Is
the Full access for everyone group being inherited from here. Can some
one advice how much permission "everyone" group should have.
TIA.
Raj
BTW: I just learned the hard way that Standard version of exchange does
not support >16GB on the Information store.Had to do an emergency
upgrade to the enterprise edition of exchange. Just an FYI.
-----Original Message-----
From: Harris, Dot [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 23, 2002 2:11 PM
To: Exchange Discussions
Subject: RE: I've never seen this
Understood, that is the way it is suppose to work. It wasn't working
that way. A user simply went through the steps, added another mailbox
and didn't have to setup delegate access and we didn't even have to give
them
permissions to the mailbox.
> -----Original Message-----
> From: Andrey Fyodorov [SMTP:[EMAIL PROTECTED]]
> Sent: Friday, August 23, 2002 2:02 PM
> To: Exchange Discussions
> Subject: RE: I've never seen this
>
> Tools-Services-Advanced allows to connect to another mailbox, but
> first you have to be given permissions to that mailbox. That is
> normally done in the Exchange Admin program (mailbox
> Properties-Security-Add-set up additional NT account as a User) and
> that normally gives full mailbox access.
>
> -----Original Message-----
> From: Harris, Dot [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 23, 2002 1:12 PM
> To: Exchange Discussions
> Subject: RE: I've never seen this
>
>
> AWESOME!
>
> Thank you.
>
> Dot
>
> > -----Original Message-----
> > From: Tim Ault [SMTP:[EMAIL PROTECTED]]
> > Sent: Friday, August 23, 2002 12:01 PM
> > To: Exchange Discussions
> > Subject: RE: I've never seen this
> >
> > Q183674: "How to Find What User Is Deleting or Editing Objects in
> > Administrator"
> >
> > -----Original Message-----
> > From: Harris, Dot [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, August 23, 2002 11:53 AM
> > To: Exchange Discussions
> > Subject: RE: I've never seen this
> >
> >
> > From within Outlook. Tools, Services, MS Exchange Server,
> > Properties, Advanced Tab.
> >
> > We've narrowed down the cause of the problem. It looks as though
> someone
> > at
> > our remote site determined that \Everyone needed Permissions Admin.
> > permissions to the DS Site Configuration. Or course, no one will
> > fess
> up.
> >
> > > -----Original Message-----
> > > From: Andrey Fyodorov [SMTP:[EMAIL PROTECTED]]
> > > Sent: Friday, August 23, 2002 10:48 AM
> > > To: Exchange Discussions
> > > Subject: RE: I've never seen this
> > >
> > > And how do the admins give the permissions for one user to access
> > > another user's mailbox?
> > >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, August 22, 2002 4:22 PM
> > > To: Exchange Discussions
> > > Subject: I've never seen this
> > >
> > >
> > > We have Exchange 5.5 - sp4 running on Windows 2000 Advanced
> > > server,
> > > sp2. In the last two weeks, whenever one of the admins attempts to
> > > give a user access to another users Outlook mailbox, we find that
the
> > > user has unlimited
> > > access to that user's mailbox and none of the
permissions/restrictions
> > > apply. It is if the delegating user is now the owner of the
mailbox.
>
> > >
> > > Any thoughts on how to resolve this?
> > >
> > > Dot
> > >
> > > _________________________________________________________________
> > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> > > Archives: http://www.swynk.com/sitesearch/search.asp
> > > To unsubscribe: mailto:[EMAIL PROTECTED]
> > > Exchange List admin: [EMAIL PROTECTED]
> > >
> > > _________________________________________________________________
> > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> > > Archives: http://www.swynk.com/sitesearch/search.asp
> > > To unsubscribe: mailto:[EMAIL PROTECTED]
> > > Exchange List admin: [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> > Archives: http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe: mailto:[EMAIL PROTECTED]
> > Exchange List admin: [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> > Archives: http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe: mailto:[EMAIL PROTECTED]
> > Exchange List admin: [EMAIL PROTECTED]
>
> _________________________________________________________________
> List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin: [EMAIL PROTECTED]
>
> _________________________________________________________________
> List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
************************************************************************
****
**This e-mail message, including any attachments, contains information
that is confidential, may be protected by the attorney/client or other
applicable privileges, and may constitute non-public information. This
message is intended to be conveyed only to the designated recipient(s).
If you are not the intended recipient of this message, do not read it;
please immediately notify the sender that you have received this message
in error and delete this message. Unauthorized use, disclosure,
dissemination, distribution or reproduction of this message or the
information contained in this message or the taking of any action in
reliance on it is strictly prohibited and may be unlawful. Thank you
for your
cooperation.************************************************************
****
**************
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
****************************************************************************
**This e-mail message, including any attachments, contains information that
is confidential, may be protected by the attorney/client or other applicable
privileges, and may constitute non-public information. This message is
intended to be conveyed only to the designated recipient(s). If you are not
the intended recipient of this message, do not read it; please immediately
notify the sender that you have received this message in error and delete
this message. Unauthorized use, disclosure, dissemination, distribution or
reproduction of this message or the information contained in this message or
the taking of any action in reliance on it is strictly prohibited and may be
unlawful. Thank you for your
cooperation.****************************************************************
**************
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
